Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/323830343a343933343a3a2f33322d313238203d3e20323637313730.roa
File:                     323830343a343933343a3a2f33322d313238203d3e20323637313730.roa (raw, json)
Hash identifier:          7SK/30L6q4ZF6g8SNQl5pO8knr8nF9jDHrNjJuWpj8s=
Subject key identifier:   C3:18:D5:2F:F4:37:62:26:80:C8:60:8B:0B:94:65:B4:49:B9:D3:AF
Certificate issuer:       /CN=2494434634BFFD100A79E77C627D336FE9CE12E8
Certificate serial:       1E5E2E96D089E67CD0DE2C5B5E590BF9BDD6E7FC
Authority key identifier: 24:94:43:46:34:BF:FD:10:0A:79:E7:7C:62:7D:33:6F:E9:CE:12:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/323830343a343933343a3a2f33322d313238203d3e20323637313730.roa
Signing time:             Thu 03 Jul 2025 20:55:45 +0000
ROA not before:           Thu 03 Jul 2025 20:50:45 +0000
ROA not after:            Thu 02 Jul 2026 20:55:45 +0000
asID:                     267170
IP address blocks:        2804:4934::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.crl
                          rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 09:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5e:2e:96:d0:89:e6:7c:d0:de:2c:5b:5e:59:0b:f9:bd:d6:e7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2494434634BFFD100A79E77C627D336FE9CE12E8
        Validity
            Not Before: Jul  3 20:50:45 2025 GMT
            Not After : Jul  2 20:55:45 2026 GMT
        Subject: CN=C318D52FF437622680C8608B0B9465B449B9D3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:4c:37:d1:fd:21:3e:40:54:07:e4:c7:7e:
                    28:d2:35:b5:50:f2:c8:ac:ad:26:ce:f8:f3:29:e1:
                    8e:bf:08:6c:e9:a3:13:5c:b1:fd:33:08:ed:bf:3a:
                    51:bf:d3:85:85:bf:af:24:71:ff:8d:ba:fd:8c:03:
                    f6:27:4b:52:0c:fc:74:f2:75:a9:33:f1:2a:1f:e7:
                    6e:25:85:c5:1a:08:e9:76:36:5a:f1:01:bf:ac:41:
                    b0:28:bf:ea:91:25:1b:81:96:bc:be:ac:0f:d3:0a:
                    c5:5b:9d:8f:53:2c:98:6b:7e:1f:93:ee:6b:cc:67:
                    0e:8c:88:91:4a:17:33:46:26:94:ce:f5:c4:f4:0d:
                    ef:08:ea:0b:2c:52:04:f7:a8:9d:af:15:09:cb:2b:
                    c5:2b:a6:4f:c3:7d:07:1e:04:ea:f6:f7:8c:a8:6c:
                    51:af:2d:8b:e7:74:4b:17:3a:d6:3b:d6:be:42:30:
                    33:c7:bd:3b:1b:70:75:9b:ed:e4:cb:14:7f:45:77:
                    4f:e8:19:89:99:f8:63:0a:39:f7:19:d4:23:ff:1e:
                    40:00:15:a0:a7:ca:90:0f:0c:de:b4:1c:e0:d3:16:
                    59:5e:f6:7b:f1:bc:83:48:93:60:1c:ea:55:e2:a7:
                    96:d9:a5:e3:2f:8d:da:85:8c:f0:2b:ee:b3:57:e7:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:18:D5:2F:F4:37:62:26:80:C8:60:8B:0B:94:65:B4:49:B9:D3:AF
            X509v3 Authority Key Identifier:
                keyid:24:94:43:46:34:BF:FD:10:0A:79:E7:7C:62:7D:33:6F:E9:CE:12:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/2494434634BFFD100A79E77C627D336FE9CE12E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2494434634BFFD100A79E77C627D336FE9CE12E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/1/323830343a343933343a3a2f33322d313238203d3e20323637313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4934::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:a1:21:f1:d3:05:19:8c:38:bd:48:ee:fd:cf:3e:e0:19:
         11:06:92:df:9a:49:cd:42:bb:1a:f7:21:73:8c:92:b7:7e:61:
         d1:63:a6:d2:87:e1:9d:93:29:f7:84:f2:ed:1a:78:62:2b:60:
         19:d0:d0:fd:f0:61:93:b4:c7:72:9a:41:5d:16:94:83:91:a1:
         b1:4b:bc:3e:73:5a:b5:d9:6b:33:9d:d7:5f:7b:5f:aa:c5:b5:
         b6:36:be:77:8f:54:63:eb:48:5b:0f:80:fc:cd:7e:d8:24:03:
         c4:3c:d9:06:57:fd:2e:aa:5e:7e:85:d1:23:5c:de:cf:f9:5e:
         b0:56:b3:d6:be:17:a5:5c:f0:55:e4:3f:9e:e0:da:fc:60:9b:
         a0:bd:25:65:f1:24:d9:e5:46:50:f7:72:f5:97:55:04:35:60:
         0d:1f:ab:dc:50:44:2b:0c:c0:4d:00:7b:78:d2:3e:d9:21:04:
         0f:16:13:98:e0:5b:36:0d:c5:2d:e4:62:50:ef:94:52:b4:ab:
         9e:ef:f5:ab:74:00:68:04:82:93:bd:86:a9:1e:33:d5:53:75:
         87:a2:28:fa:48:fe:77:e3:0d:2e:6c:e8:d2:ea:0f:bd:81:bb:
         20:ab:2e:73:1d:b0:e7:16:2c:da:9d:ba:68:35:e2:41:69:93:
         54:eb:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 16:59:27 2025 by rpki-client